Trojan.DownLoader10.30832

Technical Information

To ensure autorun and distribution:

Modifies the following registry keys:

[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'Adobe Flashplayer Final' = '%TEMP%\adobeflashplayerguncel.exe'

Malicious functions:

Creates and executes the following:

'%TEMP%\adobeguncel.exe'
'%HOMEPATH%\GSEUG\YZHXN.exe' PFMSEYMY.dat
'%HOMEPATH%\GSEUG\YZHXN.exe' 550863.JOG
'%TEMP%\adobeguncel.exe' (downloaded from the Internet)

Executes the following:

'%WINDIR%\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe'
'<SYSTEM32>\wscript.exe' "%HOMEPATH%\GSEUG\3562.vbs" 7914

Injects code into

the following system processes:

%WINDIR%\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe

Terminates or attempts to terminate

the following user processes:

chrome.exe

Modifies file system :

Creates the following files:

%HOMEPATH%\GSEUG\14777.NKL
%HOMEPATH%\GSEUG\58103.AEU
%HOMEPATH%\GSEUG\86125.ZVM
%HOMEPATH%\GSEUG\B82097.XBO
%HOMEPATH%\GSEUG\K14924.IQW
%HOMEPATH%\GSEUG\M89583.SXD
%HOMEPATH%\GSEUG\76814.TND
%HOMEPATH%\GSEUG\H64573.PIJ
%HOMEPATH%\GSEUG\25608.XXU
%HOMEPATH%\GSEUG\R78159.NJN
%HOMEPATH%\GSEUG\92458.MSF
%HOMEPATH%\GSEUG\90949.VKX
%HOMEPATH%\GSEUG\41991.ZEI
%HOMEPATH%\GSEUG\P18634.AWR
%HOMEPATH%\GSEUG\N58500.JQQ
%HOMEPATH%\GSEUG\P25578.DID
%HOMEPATH%\GSEUG\C92759.WWD
%HOMEPATH%\GSEUG\B82442.HMV
%HOMEPATH%\GSEUG\R81018.NQY
%HOMEPATH%\GSEUG\69144.UUX
%HOMEPATH%\GSEUG\57877.VMJ
%HOMEPATH%\GSEUG\26299.ZZR
%HOMEPATH%\GSEUG\R86458.BYP
%HOMEPATH%\GSEUG\I8744.OEL
%HOMEPATH%\GSEUG\Y88430.TSB
%HOMEPATH%\GSEUG\J41168.INE
%HOMEPATH%\GSEUG\62031.AUH
%HOMEPATH%\GSEUG\43425.BVO
%HOMEPATH%\GSEUG\Y17419.DLX
%HOMEPATH%\GSEUG\81059.WIK
%HOMEPATH%\GSEUG\17417.YCB
%HOMEPATH%\GSEUG\90991.YKR
%HOMEPATH%\GSEUG\2978.UXI
%HOMEPATH%\GSEUG\52059.BCT
%HOMEPATH%\GSEUG\Z3359.XOA
%HOMEPATH%\GSEUG\Y22748.HNA
%HOMEPATH%\GSEUG\6559.BBX
%HOMEPATH%\GSEUG\43845.XPZ
%HOMEPATH%\GSEUG\G63409.IQS
%HOMEPATH%\GSEUG\12775.VZN
%HOMEPATH%\GSEUG\F22889.FGK
%HOMEPATH%\GSEUG\K6346.CHL
%HOMEPATH%\GSEUG\W48079.HZB
%HOMEPATH%\GSEUG\4157.YXC
%HOMEPATH%\GSEUG\92684.PNK
%HOMEPATH%\GSEUG\Y44077.AKU
%HOMEPATH%\GSEUG\82097.DSJ
%HOMEPATH%\GSEUG\46247.LYQ
%HOMEPATH%\GSEUG\77268.JRG
%HOMEPATH%\GSEUG\44953.YLS
%HOMEPATH%\GSEUG\3744.ZAT
%HOMEPATH%\GSEUG\Y76472.HNK
%HOMEPATH%\GSEUG\J18566.TDR
%HOMEPATH%\GSEUG\92299.UAE
%HOMEPATH%\GSEUG\29608.BVY
%HOMEPATH%\GSEUG\R90274.OUM
%HOMEPATH%\GSEUG\M61456.ETF
%HOMEPATH%\GSEUG\A54437.UQX
%HOMEPATH%\GSEUG\T33729.ELR
%HOMEPATH%\GSEUG\75663.TLB
%HOMEPATH%\GSEUG\K22527.OLN
%HOMEPATH%\GSEUG\O10280.EJL
%HOMEPATH%\GSEUG\G30540.SZB
%HOMEPATH%\GSEUG\M78418.OWG
%HOMEPATH%\GSEUG\L27997.MPU
%HOMEPATH%\GSEUG\I51191.JTB
%HOMEPATH%\GSEUG\49508.QDS
%HOMEPATH%\GSEUG\P33089.JEM
%HOMEPATH%\GSEUG\H81863.NLC
%HOMEPATH%\GSEUG\35901.TQL
%HOMEPATH%\GSEUG\70660.LEM
%HOMEPATH%\GSEUG\25607.GCE
%HOMEPATH%\GSEUG\V85624.BQV
%HOMEPATH%\GSEUG\N10371.XPY
%HOMEPATH%\GSEUG\X92223.APX
%HOMEPATH%\GSEUG\W4113.AAC
%HOMEPATH%\GSEUG\C60958.ESM
%HOMEPATH%\GSEUG\E54066.AFP
%HOMEPATH%\GSEUG\H16222.NQI
%HOMEPATH%\GSEUG\3363.NAP
%HOMEPATH%\GSEUG\M97513.JLH
%HOMEPATH%\GSEUG\Y13513.WTC
%HOMEPATH%\GSEUG\J2397.QNW
%HOMEPATH%\GSEUG\49567.WMF
%HOMEPATH%\GSEUG\9754.EPB
%HOMEPATH%\GSEUG\75250.VPX
%HOMEPATH%\GSEUG\Z43983.CXX
%HOMEPATH%\GSEUG\67587.NCQ
%HOMEPATH%\GSEUG\O67622.HRX
%HOMEPATH%\GSEUG\K80297.ZJU
%HOMEPATH%\GSEUG\D95579.NZZ
%HOMEPATH%\GSEUG\Q74464.RPW
%HOMEPATH%\GSEUG\19426.YLC
%HOMEPATH%\GSEUG\U60994.NKP
%HOMEPATH%\GSEUG\1689.DWG
%HOMEPATH%\GSEUG\S37323.TTW
%HOMEPATH%\GSEUG\R44059.ULZ
%HOMEPATH%\GSEUG\D36858.JVJ
%HOMEPATH%\GSEUG\Q92316.LYT
%HOMEPATH%\GSEUG\54617.CLQ
%HOMEPATH%\GSEUG\29800.LPF
%HOMEPATH%\GSEUG\70133.VJR
%HOMEPATH%\GSEUG\33991.JTE
%HOMEPATH%\GSEUG\22791.JHJ
%HOMEPATH%\GSEUG\47268.IEM
%HOMEPATH%\GSEUG\Y54305.REG
%HOMEPATH%\GSEUG\67075.ZAB
%HOMEPATH%\GSEUG\96486.TKD
%HOMEPATH%\GSEUG\47612.OLS
%HOMEPATH%\GSEUG\I86836.FQL
%HOMEPATH%\GSEUG\93872.TAH
%HOMEPATH%\GSEUG\G38001.MGN
%HOMEPATH%\GSEUG\I63605.UXA
%HOMEPATH%\GSEUG\K22365.LTX
%HOMEPATH%\GSEUG\1057.SEF
%HOMEPATH%\GSEUG\27601.QBW
%HOMEPATH%\GSEUG\8016.JAY
%HOMEPATH%\GSEUG\29119.BTX
%HOMEPATH%\GSEUG\18192.PPG
%HOMEPATH%\GSEUG\Q47094.LGI
%HOMEPATH%\GSEUG\V50930.VUC
%HOMEPATH%\GSEUG\S78013.HQS
%HOMEPATH%\GSEUG\W59446.MKF
%HOMEPATH%\GSEUG\C90732.FOA
%HOMEPATH%\GSEUG\U68922.IUJ
%HOMEPATH%\GSEUG\M40265.JFW
%HOMEPATH%\GSEUG\Y85631.YTW
%HOMEPATH%\GSEUG\23052.EXC
%HOMEPATH%\GSEUG\44537.CUK
%HOMEPATH%\GSEUG\62850.PYY
%HOMEPATH%\GSEUG\79056.FYL
%HOMEPATH%\GSEUG\Q26058.ILG
%HOMEPATH%\GSEUG\63796.DCC
%HOMEPATH%\GSEUG\48382.RKV
%HOMEPATH%\GSEUG\M22575.EXV
%HOMEPATH%\GSEUG\W89466.BQU
%HOMEPATH%\GSEUG\S87543.YAT
%HOMEPATH%\GSEUG\32949.IWS
%HOMEPATH%\GSEUG\47168.JWM
%HOMEPATH%\GSEUG\43660.PEG
%HOMEPATH%\GSEUG\J99263.RNS
%HOMEPATH%\GSEUG\97982.NUI
%HOMEPATH%\GSEUG\2095.YRP
%HOMEPATH%\GSEUG\B37427.BWP
%HOMEPATH%\GSEUG\I76625.NHJ
%HOMEPATH%\GSEUG\H38339.RDC
%HOMEPATH%\GSEUG\88032.ADL
%HOMEPATH%\GSEUG\C97094.EBP
%HOMEPATH%\GSEUG\41299.FEH
%HOMEPATH%\GSEUG\75598.ADB
%HOMEPATH%\GSEUG\C15167.LPK
%HOMEPATH%\GSEUG\W29294.UZD
%HOMEPATH%\GSEUG\75516.ZOZ
%HOMEPATH%\GSEUG\16367.CBD
%HOMEPATH%\GSEUG\E58129.OHZ
%HOMEPATH%\GSEUG\97957.NRF
%HOMEPATH%\GSEUG\T37532.DWG
%HOMEPATH%\GSEUG\M23770.CKS
%HOMEPATH%\GSEUG\43601.HFL
%HOMEPATH%\GSEUG\G62533.XHE
%HOMEPATH%\GSEUG\F58015.GHI
%HOMEPATH%\GSEUG\S2259.LYK
%HOMEPATH%\GSEUG\A3830.DLN
%HOMEPATH%\GSEUG\34292.BKE
%HOMEPATH%\GSEUG\60896.SAR
%HOMEPATH%\GSEUG\70945.UUG
%HOMEPATH%\GSEUG\B73235.SVR
%HOMEPATH%\GSEUG\PFMSEYMY.dat
%HOMEPATH%\GSEUG\34716.JOX
%HOMEPATH%\GSEUG\6247.OSG
%HOMEPATH%\GSEUG\77679.JTS
%HOMEPATH%\GSEUG\Q89791.UQN
%HOMEPATH%\GSEUG\15701.OMC
%TEMP%\Extensions\Preferences
%TEMP%\Extensions\manifest.json
%TEMP%\adobeguncel.exe
%TEMP%\adobeflashplayerguncel.exe
%TEMP%\Extensions\icon.png
%TEMP%\Extensions\background.js
%TEMP%\Extensions\script.js
%TEMP%\Extensions\jquery-1.9.1.min.js
%HOMEPATH%\GSEUG\F16883.UVV
%HOMEPATH%\GSEUG\D7040.LYC
%HOMEPATH%\GSEUG\76451.DMR
%HOMEPATH%\GSEUG\I29771.QDZ
%HOMEPATH%\GSEUG\I62634.GUF
%HOMEPATH%\GSEUG\J13892.GAW
%HOMEPATH%\GSEUG\N21585.NGJ
%HOMEPATH%\GSEUG\X2453.MDO
%HOMEPATH%\GSEUG\31734.LVM
%HOMEPATH%\GSEUG\E84604.FIJ
%HOMEPATH%\GSEUG\69635.QZL
%HOMEPATH%\GSEUG\R60921.CZA
%HOMEPATH%\GSEUG\I1441.FYV
%HOMEPATH%\GSEUG\V45031.CWP
%HOMEPATH%\GSEUG\57249.STH
%HOMEPATH%\GSEUG\28688.WPH
%HOMEPATH%\GSEUG\95822.WKC
%HOMEPATH%\GSEUG\81116.HVT
%HOMEPATH%\GSEUG\E36582.XNG
%HOMEPATH%\GSEUG\T79505.CXU
%HOMEPATH%\GSEUG\B37981.ONJ
%HOMEPATH%\GSEUG\I75262.TYJ
%HOMEPATH%\GSEUG\16836.GWR
%HOMEPATH%\GSEUG\20882.TMH
%HOMEPATH%\GSEUG\D79808.STN
%HOMEPATH%\GSEUG\23729.KQY
%HOMEPATH%\GSEUG\40889.RZP
%HOMEPATH%\GSEUG\66565.JHI
%HOMEPATH%\GSEUG\84796.AFZ
%HOMEPATH%\GSEUG\33481.IFQ
%HOMEPATH%\GSEUG\76858.TYP
%HOMEPATH%\GSEUG\56321.VWJ
%HOMEPATH%\GSEUG\G5066.NXS
%HOMEPATH%\GSEUG\62893.NZR
%HOMEPATH%\GSEUG\4465.CAS
%HOMEPATH%\GSEUG\K5027.QGV
%HOMEPATH%\GSEUG\19580.JQC
%HOMEPATH%\GSEUG\72938.RVA
%HOMEPATH%\GSEUG\48442.SII
%HOMEPATH%\GSEUG\G90679.JAP
%HOMEPATH%\GSEUG\25031.UCR
%HOMEPATH%\GSEUG\8124.TNC
%HOMEPATH%\GSEUG\88903.DXW
%HOMEPATH%\GSEUG\63117.VVH
%HOMEPATH%\GSEUG\O29445.VOV
%HOMEPATH%\GSEUG\10430.DLJ
%HOMEPATH%\GSEUG\G98693.XOF
%HOMEPATH%\GSEUG\C1299.GGF
%HOMEPATH%\GSEUG\93281.LTK
%HOMEPATH%\GSEUG\32803.TKC
%HOMEPATH%\GSEUG\N74598.VGG
%HOMEPATH%\GSEUG\T55296.OWG
%HOMEPATH%\GSEUG\88970.OPK
%HOMEPATH%\GSEUG\S70983.RPO
%HOMEPATH%\GSEUG\I54867.VVK
%HOMEPATH%\GSEUG\78429.PZL
%HOMEPATH%\GSEUG\54866.OCU
%HOMEPATH%\GSEUG\78095.JOQ
%HOMEPATH%\GSEUG\T66454.YWJ
%HOMEPATH%\GSEUG\8115.WDO
%HOMEPATH%\GSEUG\49838.YPK
%HOMEPATH%\GSEUG\I68402.GZR
%HOMEPATH%\GSEUG\8575.FYO
%HOMEPATH%\GSEUG\M56239.SSW
%HOMEPATH%\GSEUG\S84033.KJR
%HOMEPATH%\GSEUG\H60702.MUB
%HOMEPATH%\GSEUG\Y33073.TTO
%HOMEPATH%\GSEUG\64616.LTU
%HOMEPATH%\GSEUG\57576.MBZ
%HOMEPATH%\GSEUG\H88172.EVU
%HOMEPATH%\GSEUG\V31093.UYI
%HOMEPATH%\GSEUG\J38773.UQC
%HOMEPATH%\GSEUG\27097.GKV
%HOMEPATH%\GSEUG\J63033.EZP
%HOMEPATH%\GSEUG\84675.QST
%HOMEPATH%\GSEUG\47694.ROW
%HOMEPATH%\GSEUG\7468.YEH
%HOMEPATH%\GSEUG\Q59380.BMY
%HOMEPATH%\GSEUG\47176.UMW
%HOMEPATH%\GSEUG\13972.KAA
%HOMEPATH%\GSEUG\Q43068.QWM
%HOMEPATH%\GSEUG\60830.KQZ
%HOMEPATH%\GSEUG\S14073.IBK
%HOMEPATH%\GSEUG\M92086.NVE
%HOMEPATH%\GSEUG\34200.AVM
%HOMEPATH%\GSEUG\78761.JKB
%HOMEPATH%\GSEUG\1440.KAP
%HOMEPATH%\GSEUG\33071.JLM
%HOMEPATH%\GSEUG\N78943.LEO
%HOMEPATH%\GSEUG\27547.XBH
%HOMEPATH%\GSEUG\69454.GNH
%HOMEPATH%\GSEUG\Y22215.GXT
%HOMEPATH%\GSEUG\S42902.XVV
%HOMEPATH%\GSEUG\X86619.IXL
%HOMEPATH%\GSEUG\I8823.CWZ
%HOMEPATH%\GSEUG\73834.RSN
%HOMEPATH%\GSEUG\M4193.MRV
%HOMEPATH%\GSEUG\84231.HXK
%HOMEPATH%\GSEUG\L84674.LLA
%HOMEPATH%\GSEUG\M52107.VYG
%HOMEPATH%\GSEUG\23188.NGZ
%HOMEPATH%\GSEUG\86889.AKC
%HOMEPATH%\GSEUG\78124.KHJ
%HOMEPATH%\GSEUG\F29890.IRJ
%HOMEPATH%\GSEUG\2329.EYV
%HOMEPATH%\GSEUG\M72765.CKW
%HOMEPATH%\GSEUG\T1083.YCS
%HOMEPATH%\GSEUG\52561.ZIN
%HOMEPATH%\GSEUG\2072.ZFX
%HOMEPATH%\GSEUG\Q12147.ROS
%HOMEPATH%\GSEUG\89983.JGP
%HOMEPATH%\GSEUG\M98234.VER
%HOMEPATH%\GSEUG\38196.WLW
%HOMEPATH%\GSEUG\A37580.CIG
%HOMEPATH%\GSEUG\D55812.ZGV
%HOMEPATH%\GSEUG\76479.JAZ
%HOMEPATH%\GSEUG\45999.TWJ
%HOMEPATH%\GSEUG\16442.MCO
%HOMEPATH%\GSEUG\D89026.BVA
%HOMEPATH%\GSEUG\12938.NXT
%HOMEPATH%\GSEUG\J2123.DCH
%HOMEPATH%\GSEUG\T35512.UBO
%HOMEPATH%\GSEUG\85507.LVR
%HOMEPATH%\GSEUG\17981.DDV
%HOMEPATH%\GSEUG\51067.BDC
%HOMEPATH%\GSEUG\Y46168.AXQ
%HOMEPATH%\GSEUG\G64787.PTE
%HOMEPATH%\GSEUG\V35016.VIM
%HOMEPATH%\GSEUG\50044.TUX
%HOMEPATH%\GSEUG\56486.CVW
%HOMEPATH%\GSEUG\60413.JCC
%HOMEPATH%\GSEUG\31873.KTM
%HOMEPATH%\GSEUG\69206.CYZ
%HOMEPATH%\GSEUG\V30875.XJJ
%HOMEPATH%\GSEUG\W82716.TRI
%HOMEPATH%\GSEUG\C56147.QDS
%HOMEPATH%\GSEUG\M95343.GHR
%HOMEPATH%\GSEUG\H76449.XZG
%HOMEPATH%\GSEUG\N15454.ITH
%HOMEPATH%\GSEUG\D99480.DIF
%HOMEPATH%\GSEUG\Q8369.WVY
%HOMEPATH%\GSEUG\Z26632.VJD
%HOMEPATH%\GSEUG\D29692.CZX
%HOMEPATH%\GSEUG\71068.GYK
%HOMEPATH%\GSEUG\S98252.WMV
%HOMEPATH%\GSEUG\X51629.REL
%HOMEPATH%\GSEUG\R19596.RES
%HOMEPATH%\GSEUG\36560.IIL
%HOMEPATH%\GSEUG\W94291.NWY
%HOMEPATH%\GSEUG\U65302.JDZ
%HOMEPATH%\GSEUG\1221.CLL
%HOMEPATH%\GSEUG\T43712.HNQ
%HOMEPATH%\GSEUG\T45803.TOU
%HOMEPATH%\GSEUG\T22456.UMQ
%HOMEPATH%\GSEUG\B18964.VIX
%HOMEPATH%\GSEUG\J69075.OSA
%HOMEPATH%\GSEUG\E33150.HTY
%HOMEPATH%\GSEUG\85947.GKZ
%HOMEPATH%\GSEUG\83078.WCV
%HOMEPATH%\GSEUG\E53293.EFS
%HOMEPATH%\GSEUG\78405.IQG
%HOMEPATH%\GSEUG\K97686.TRY
%HOMEPATH%\GSEUG\18587.PEU
%HOMEPATH%\GSEUG\51348.CIG
%HOMEPATH%\GSEUG\3562.vbs
%HOMEPATH%\GSEUG\settings.ini
%HOMEPATH%\GSEUG\68525.NON
%HOMEPATH%\GSEUG\89114.WFH
%HOMEPATH%\GSEUG\292715.dat
%HOMEPATH%\GSEUG\550863.JOG
%HOMEPATH%\GSEUG\YZHXN.exe
%HOMEPATH%\GSEUG\257415.dat
%HOMEPATH%\GSEUG\B89440.JJM
%HOMEPATH%\GSEUG\1354.OCM
%HOMEPATH%\GSEUG\74954.UJY
%HOMEPATH%\GSEUG\23754.FKI
%HOMEPATH%\GSEUG\97112.DAY
%HOMEPATH%\GSEUG\62747.ZXH
%HOMEPATH%\GSEUG\F77029.FHZ
%HOMEPATH%\GSEUG\13273.JAV
%HOMEPATH%\GSEUG\J61696.CDW
%HOMEPATH%\GSEUG\49847.AKO
%HOMEPATH%\GSEUG\J77932.WHR
%HOMEPATH%\GSEUG\I85073.JDO
%HOMEPATH%\GSEUG\91390.QFD
%HOMEPATH%\GSEUG\K12406.QPC
%HOMEPATH%\GSEUG\52584.CUI
%HOMEPATH%\GSEUG\V37037.JWQ
%HOMEPATH%\GSEUG\13428.BBF
%HOMEPATH%\GSEUG\37827.FCG
%HOMEPATH%\GSEUG\58619.TIE
%HOMEPATH%\GSEUG\28088.YIP
%HOMEPATH%\GSEUG\N56969.JFK
%HOMEPATH%\GSEUG\46389.BGU
%HOMEPATH%\GSEUG\R44506.HDI
%HOMEPATH%\GSEUG\D49139.CCT
%HOMEPATH%\GSEUG\59589.BTM
%HOMEPATH%\GSEUG\V49093.QOM
%HOMEPATH%\GSEUG\J50280.WWN
%HOMEPATH%\GSEUG\36083.GRL
%HOMEPATH%\GSEUG\A85871.VHJ
%HOMEPATH%\GSEUG\X18653.AKV
%HOMEPATH%\GSEUG\U98374.QJE
%HOMEPATH%\GSEUG\85109.ASX
%HOMEPATH%\GSEUG\H24839.RFL
%HOMEPATH%\GSEUG\K56522.VVH
%HOMEPATH%\GSEUG\A2511.GFF
%HOMEPATH%\GSEUG\76005.EKC
%HOMEPATH%\GSEUG\I66835.RXY
%HOMEPATH%\GSEUG\87966.TDF
%HOMEPATH%\GSEUG\95317.JIP
%HOMEPATH%\GSEUG\59457.OII
%HOMEPATH%\GSEUG\72254.EHU
%HOMEPATH%\GSEUG\42729.IFU
%HOMEPATH%\GSEUG\37818.XYX
%HOMEPATH%\GSEUG\S48504.RFF
%HOMEPATH%\GSEUG\40276.KOO
%HOMEPATH%\GSEUG\5021.FKW
%HOMEPATH%\GSEUG\O3075.ORK
%HOMEPATH%\GSEUG\65277.CAD
%HOMEPATH%\GSEUG\12193.NQJ
%HOMEPATH%\GSEUG\83721.MMV
%HOMEPATH%\GSEUG\40328.OTE
%HOMEPATH%\GSEUG\97200.GOB
%HOMEPATH%\GSEUG\65812.UOR
%HOMEPATH%\GSEUG\P5200.SMV
%HOMEPATH%\GSEUG\47710.KUQ
%HOMEPATH%\GSEUG\G77483.TMY
%HOMEPATH%\GSEUG\G24487.PEE
%HOMEPATH%\GSEUG\O83353.FYF
%HOMEPATH%\GSEUG\44474.AHS
%HOMEPATH%\GSEUG\37036.DFY
%HOMEPATH%\GSEUG\X73224.OXA
%HOMEPATH%\GSEUG\J33725.UIG
%HOMEPATH%\GSEUG\83171.XLY
%HOMEPATH%\GSEUG\61088.UHV
%HOMEPATH%\GSEUG\L92751.TQY
%HOMEPATH%\GSEUG\H87282.LHR
%HOMEPATH%\GSEUG\H18813.XCE
%HOMEPATH%\GSEUG\68641.JWC
%HOMEPATH%\GSEUG\S27167.FHW
%HOMEPATH%\GSEUG\D73276.QWG
%HOMEPATH%\GSEUG\L47128.FVZ
%HOMEPATH%\GSEUG\K79692.EYL
%HOMEPATH%\GSEUG\Y6884.RNI
%HOMEPATH%\GSEUG\41916.TQI
%HOMEPATH%\GSEUG\30817.UGH
%HOMEPATH%\GSEUG\32121.RSH
%HOMEPATH%\GSEUG\26914.CJW
%HOMEPATH%\GSEUG\32584.JIH
%HOMEPATH%\GSEUG\G17291.VAO
%HOMEPATH%\GSEUG\E64522.EXZ
%HOMEPATH%\GSEUG\P31573.EBG
%HOMEPATH%\GSEUG\J37508.YYJ
%HOMEPATH%\GSEUG\G29084.LRA
%HOMEPATH%\GSEUG\K18173.JLL
%HOMEPATH%\GSEUG\B13933.AEA
%HOMEPATH%\GSEUG\40456.GBX
%HOMEPATH%\GSEUG\L10743.PXT
%HOMEPATH%\GSEUG\L52049.LII
%HOMEPATH%\GSEUG\J5274.HDH
%HOMEPATH%\GSEUG\Q76390.LEY
%HOMEPATH%\GSEUG\85608.AZS
%HOMEPATH%\GSEUG\L40057.LQF
%HOMEPATH%\GSEUG\51173.FBU
%HOMEPATH%\GSEUG\53749.WYM
%HOMEPATH%\GSEUG\K95697.BPX
%HOMEPATH%\GSEUG\O5532.UWX
%HOMEPATH%\GSEUG\R63750.BHE
%HOMEPATH%\GSEUG\43254.PGZ
%HOMEPATH%\GSEUG\41416.MCS
%HOMEPATH%\GSEUG\O40889.AWL
%HOMEPATH%\GSEUG\W25133.TLM
%HOMEPATH%\GSEUG\63952.PFQ
%HOMEPATH%\GSEUG\24047.OCQ
%HOMEPATH%\GSEUG\U45015.MBW
%HOMEPATH%\GSEUG\U11766.XSG
%HOMEPATH%\GSEUG\67315.YUL
%HOMEPATH%\GSEUG\23738.DAC
%HOMEPATH%\GSEUG\Z87055.DGM
%HOMEPATH%\GSEUG\N26166.BJW
%HOMEPATH%\GSEUG\25212.QFP
%HOMEPATH%\GSEUG\T65781.SLO
%HOMEPATH%\GSEUG\W73137.CPX
%HOMEPATH%\GSEUG\12714.FFE
%HOMEPATH%\GSEUG\O81560.ZCH
%HOMEPATH%\GSEUG\71666.SVO
%HOMEPATH%\GSEUG\T84423.TZQ
%HOMEPATH%\GSEUG\50212.FNL
%HOMEPATH%\GSEUG\36715.YCS
%HOMEPATH%\GSEUG\94250.TID
%HOMEPATH%\GSEUG\25761.ZNF
%HOMEPATH%\GSEUG\34309.USI
%HOMEPATH%\GSEUG\36083.UCF
%HOMEPATH%\GSEUG\Y61562.EJS
%HOMEPATH%\GSEUG\D85565.FWH
%HOMEPATH%\GSEUG\V92847.WUO
%HOMEPATH%\GSEUG\M10385.GBN
%HOMEPATH%\GSEUG\H68466.ONQ
%HOMEPATH%\GSEUG\E45873.IZP
%HOMEPATH%\GSEUG\P69937.SKM
%HOMEPATH%\GSEUG\J42494.JMH
%HOMEPATH%\GSEUG\D68841.SNQ
%HOMEPATH%\GSEUG\99850.FBX
%HOMEPATH%\GSEUG\R92401.HXF
%HOMEPATH%\GSEUG\70369.WRL
%HOMEPATH%\GSEUG\D82608.HHL
%HOMEPATH%\GSEUG\P52958.LVQ
%HOMEPATH%\GSEUG\N77894.RYD
%HOMEPATH%\GSEUG\A44280.YLR
%HOMEPATH%\GSEUG\69045.QRM
%HOMEPATH%\GSEUG\11580.IQB
%HOMEPATH%\GSEUG\78477.AMY
%HOMEPATH%\GSEUG\B93617.VEO
%HOMEPATH%\GSEUG\K57835.JYC
%HOMEPATH%\GSEUG\G1092.ENT
%HOMEPATH%\GSEUG\C49610.KTR
%HOMEPATH%\GSEUG\W44068.JVI
%HOMEPATH%\GSEUG\9696.NSN
%HOMEPATH%\GSEUG\R96699.QCO
%HOMEPATH%\GSEUG\A80080.BXE
%HOMEPATH%\GSEUG\67249.HXU
%HOMEPATH%\GSEUG\N33723.OIS
%HOMEPATH%\GSEUG\47450.MAJ
%HOMEPATH%\GSEUG\89254.YBB
%HOMEPATH%\GSEUG\66594.TQG
%HOMEPATH%\GSEUG\53699.CAH
%HOMEPATH%\GSEUG\Y15275.LUD
%HOMEPATH%\GSEUG\48926.TVC
%HOMEPATH%\GSEUG\63779.KDA
%HOMEPATH%\GSEUG\35166.OHX
%HOMEPATH%\GSEUG\80710.JEM
%HOMEPATH%\GSEUG\K36643.RUU
%HOMEPATH%\GSEUG\G70398.KEK
%HOMEPATH%\GSEUG\S99541.UPX
%HOMEPATH%\GSEUG\L62801.YQH
%HOMEPATH%\GSEUG\O15364.UFF
%HOMEPATH%\GSEUG\E33019.IVH
%HOMEPATH%\GSEUG\H60701.WUV
%HOMEPATH%\GSEUG\89624.TYP
%HOMEPATH%\GSEUG\49952.DBI
%HOMEPATH%\GSEUG\B32928.EIP
%HOMEPATH%\GSEUG\Z24464.NHX
%HOMEPATH%\GSEUG\E71235.ZCR
%HOMEPATH%\GSEUG\62136.QEL

Sets the 'hidden' attribute to the following files:

%HOMEPATH%\GSEUG\M89583.SXD
%HOMEPATH%\GSEUG\62031.AUH
%HOMEPATH%\GSEUG\H64573.PIJ
%HOMEPATH%\GSEUG\K14924.IQW
%HOMEPATH%\GSEUG\J41168.INE
%HOMEPATH%\GSEUG\17417.YCB
%HOMEPATH%\GSEUG\43425.BVO
%HOMEPATH%\GSEUG\Y88430.TSB
%HOMEPATH%\GSEUG\P18634.AWR
%HOMEPATH%\GSEUG\86125.ZVM
%HOMEPATH%\GSEUG\P25578.DID
%HOMEPATH%\GSEUG\41991.ZEI
%HOMEPATH%\GSEUG\58103.AEU
%HOMEPATH%\GSEUG\76814.TND
%HOMEPATH%\GSEUG\B82097.XBO
%HOMEPATH%\GSEUG\14777.NKL
%HOMEPATH%\GSEUG\26299.ZZR
%HOMEPATH%\GSEUG\I51191.JTB
%HOMEPATH%\GSEUG\I8744.OEL
%HOMEPATH%\GSEUG\57877.VMJ
%HOMEPATH%\GSEUG\96486.TKD
%HOMEPATH%\GSEUG\47612.OLS
%HOMEPATH%\GSEUG\I86836.FQL
%HOMEPATH%\GSEUG\93872.TAH
%HOMEPATH%\GSEUG\81059.WIK
%HOMEPATH%\GSEUG\R81018.NQY
%HOMEPATH%\GSEUG\90991.YKR
%HOMEPATH%\GSEUG\Y17419.DLX
%HOMEPATH%\GSEUG\B82442.HMV
%HOMEPATH%\GSEUG\R86458.BYP
%HOMEPATH%\GSEUG\69144.UUX
%HOMEPATH%\GSEUG\C92759.WWD
%HOMEPATH%\GSEUG\75663.TLB
%HOMEPATH%\GSEUG\K22527.OLN
%HOMEPATH%\GSEUG\43845.XPZ
%HOMEPATH%\GSEUG\G63409.IQS
%HOMEPATH%\GSEUG\M78418.OWG
%HOMEPATH%\GSEUG\L27997.MPU
%HOMEPATH%\GSEUG\A54437.UQX
%HOMEPATH%\GSEUG\T33729.ELR
%HOMEPATH%\GSEUG\Y22748.HNA
%HOMEPATH%\GSEUG\6559.BBX
%HOMEPATH%\GSEUG\Y44077.AKU
%HOMEPATH%\GSEUG\82097.DSJ
%HOMEPATH%\GSEUG\12775.VZN
%HOMEPATH%\GSEUG\F22889.FGK
%HOMEPATH%\GSEUG\52059.BCT
%HOMEPATH%\GSEUG\Z3359.XOA
%HOMEPATH%\GSEUG\2978.UXI
%HOMEPATH%\GSEUG\92458.MSF
%HOMEPATH%\GSEUG\92299.UAE
%HOMEPATH%\GSEUG\29608.BVY
%HOMEPATH%\GSEUG\R78159.NJN
%HOMEPATH%\GSEUG\N58500.JQQ
%HOMEPATH%\GSEUG\90949.VKX
%HOMEPATH%\GSEUG\25608.XXU
%HOMEPATH%\GSEUG\Y76472.HNK
%HOMEPATH%\GSEUG\J18566.TDR
%HOMEPATH%\GSEUG\O10280.EJL
%HOMEPATH%\GSEUG\G30540.SZB
%HOMEPATH%\GSEUG\R90274.OUM
%HOMEPATH%\GSEUG\M61456.ETF
%HOMEPATH%\GSEUG\44953.YLS
%HOMEPATH%\GSEUG\3744.ZAT
%HOMEPATH%\GSEUG\K22365.LTX
%HOMEPATH%\GSEUG\70660.LEM
%HOMEPATH%\GSEUG\25607.GCE
%HOMEPATH%\GSEUG\V85624.BQV
%HOMEPATH%\GSEUG\N10371.XPY
%HOMEPATH%\GSEUG\D95579.NZZ
%HOMEPATH%\GSEUG\Q74464.RPW
%HOMEPATH%\GSEUG\19426.YLC
%HOMEPATH%\GSEUG\U60994.NKP
%HOMEPATH%\GSEUG\H16222.NQI
%HOMEPATH%\GSEUG\3363.NAP
%HOMEPATH%\GSEUG\M97513.JLH
%HOMEPATH%\GSEUG\Y13513.WTC
%HOMEPATH%\GSEUG\49508.QDS
%HOMEPATH%\GSEUG\P33089.JEM
%HOMEPATH%\GSEUG\H81863.NLC
%HOMEPATH%\GSEUG\35901.TQL
%HOMEPATH%\GSEUG\Z43983.CXX
%HOMEPATH%\GSEUG\67587.NCQ
%HOMEPATH%\GSEUG\O67622.HRX
%HOMEPATH%\GSEUG\K80297.ZJU
%HOMEPATH%\GSEUG\K18173.JLL
%HOMEPATH%\GSEUG\B13933.AEA
%HOMEPATH%\GSEUG\40456.GBX
%HOMEPATH%\GSEUG\L10743.PXT
%HOMEPATH%\GSEUG\1689.DWG
%HOMEPATH%\GSEUG\S37323.TTW
%HOMEPATH%\GSEUG\R44059.ULZ
%HOMEPATH%\GSEUG\D36858.JVJ
%HOMEPATH%\GSEUG\J2397.QNW
%HOMEPATH%\GSEUG\49567.WMF
%HOMEPATH%\GSEUG\9754.EPB
%HOMEPATH%\GSEUG\75250.VPX
%HOMEPATH%\GSEUG\47268.IEM
%HOMEPATH%\GSEUG\M40265.JFW
%HOMEPATH%\GSEUG\67075.ZAB
%HOMEPATH%\GSEUG\22791.JHJ
%HOMEPATH%\GSEUG\U68922.IUJ
%HOMEPATH%\GSEUG\62850.PYY
%HOMEPATH%\GSEUG\Y85631.YTW
%HOMEPATH%\GSEUG\C90732.FOA
%HOMEPATH%\GSEUG\I63605.UXA
%HOMEPATH%\GSEUG\70133.VJR
%HOMEPATH%\GSEUG\1057.SEF
%HOMEPATH%\GSEUG\G38001.MGN
%HOMEPATH%\GSEUG\29800.LPF
%HOMEPATH%\GSEUG\Y54305.REG
%HOMEPATH%\GSEUG\33991.JTE
%HOMEPATH%\GSEUG\54617.CLQ
%HOMEPATH%\GSEUG\V50930.VUC
%HOMEPATH%\GSEUG\Q92316.LYT
%HOMEPATH%\GSEUG\W59446.MKF
%HOMEPATH%\GSEUG\Q47094.LGI
%HOMEPATH%\GSEUG\X92223.APX
%HOMEPATH%\GSEUG\W4113.AAC
%HOMEPATH%\GSEUG\C60958.ESM
%HOMEPATH%\GSEUG\E54066.AFP
%HOMEPATH%\GSEUG\44537.CUK
%HOMEPATH%\GSEUG\29119.BTX
%HOMEPATH%\GSEUG\79056.FYL
%HOMEPATH%\GSEUG\23052.EXC
%HOMEPATH%\GSEUG\8016.JAY
%HOMEPATH%\GSEUG\S78013.HQS
%HOMEPATH%\GSEUG\18192.PPG
%HOMEPATH%\GSEUG\27601.QBW
%HOMEPATH%\GSEUG\T37532.DWG
%HOMEPATH%\GSEUG\M23770.CKS
%HOMEPATH%\GSEUG\43601.HFL
%HOMEPATH%\GSEUG\G62533.XHE
%HOMEPATH%\GSEUG\F58015.GHI
%HOMEPATH%\GSEUG\S2259.LYK
%HOMEPATH%\GSEUG\A3830.DLN
%HOMEPATH%\GSEUG\34292.BKE
%HOMEPATH%\GSEUG\63796.DCC
%HOMEPATH%\GSEUG\48382.RKV
%HOMEPATH%\GSEUG\M22575.EXV
%HOMEPATH%\GSEUG\W89466.BQU
%HOMEPATH%\GSEUG\S87543.YAT
%HOMEPATH%\GSEUG\32949.IWS
%HOMEPATH%\GSEUG\47168.JWM
%HOMEPATH%\GSEUG\43660.PEG
%HOMEPATH%\GSEUG\I68402.GZR
%HOMEPATH%\GSEUG\T66454.YWJ
%HOMEPATH%\GSEUG\95822.WKC
%HOMEPATH%\GSEUG\49838.YPK
%HOMEPATH%\GSEUG\H60702.MUB
%HOMEPATH%\GSEUG\8575.FYO
%HOMEPATH%\GSEUG\8115.WDO
%HOMEPATH%\GSEUG\S84033.KJR
%HOMEPATH%\GSEUG\41299.FEH
%HOMEPATH%\GSEUG\75598.ADB
%HOMEPATH%\GSEUG\C15167.LPK
%HOMEPATH%\GSEUG\W29294.UZD
%HOMEPATH%\GSEUG\75516.ZOZ
%HOMEPATH%\GSEUG\16367.CBD
%HOMEPATH%\GSEUG\E58129.OHZ
%HOMEPATH%\GSEUG\97957.NRF
%HOMEPATH%\GSEUG\E84604.FIJ
%HOMEPATH%\GSEUG\57249.STH
%HOMEPATH%\GSEUG\R60921.CZA
%HOMEPATH%\GSEUG\31734.LVM
%HOMEPATH%\GSEUG\V45031.CWP
%HOMEPATH%\GSEUG\76451.DMR
%HOMEPATH%\GSEUG\28688.WPH
%HOMEPATH%\GSEUG\I1441.FYV
%HOMEPATH%\GSEUG\B73235.SVR
%HOMEPATH%\GSEUG\Q89791.UQN
%HOMEPATH%\GSEUG\34716.JOX
%HOMEPATH%\GSEUG\70945.UUG
%HOMEPATH%\GSEUG\77679.JTS
%HOMEPATH%\GSEUG\69635.QZL
%HOMEPATH%\GSEUG\15701.OMC
%HOMEPATH%\GSEUG\6247.OSG
%HOMEPATH%\GSEUG\J99263.RNS
%HOMEPATH%\GSEUG\97982.NUI
%HOMEPATH%\GSEUG\2095.YRP
%HOMEPATH%\GSEUG\B37427.BWP
%HOMEPATH%\GSEUG\I76625.NHJ
%HOMEPATH%\GSEUG\H38339.RDC
%HOMEPATH%\GSEUG\88032.ADL
%HOMEPATH%\GSEUG\C97094.EBP
%HOMEPATH%\GSEUG\D7040.LYC
%HOMEPATH%\GSEUG\N21585.NGJ
%HOMEPATH%\GSEUG\I29771.QDZ
%HOMEPATH%\GSEUG\F16883.UVV
%HOMEPATH%\GSEUG\J13892.GAW
%HOMEPATH%\GSEUG\60896.SAR
%HOMEPATH%\GSEUG\X2453.MDO
%HOMEPATH%\GSEUG\I62634.GUF
%HOMEPATH%\GSEUG\M56239.SSW
%HOMEPATH%\GSEUG\O29445.VOV
%HOMEPATH%\GSEUG\8124.TNC
%HOMEPATH%\GSEUG\16836.GWR
%HOMEPATH%\GSEUG\63117.VVH
%HOMEPATH%\GSEUG\93281.LTK
%HOMEPATH%\GSEUG\10430.DLJ
%HOMEPATH%\GSEUG\88903.DXW
%HOMEPATH%\GSEUG\C1299.GGF
%HOMEPATH%\GSEUG\B37981.ONJ
%HOMEPATH%\GSEUG\81116.HVT
%HOMEPATH%\GSEUG\76858.TYP
%HOMEPATH%\GSEUG\T79505.CXU
%HOMEPATH%\GSEUG\D79808.STN
%HOMEPATH%\GSEUG\I75262.TYJ
%HOMEPATH%\GSEUG\E36582.XNG
%HOMEPATH%\GSEUG\20882.TMH
%HOMEPATH%\GSEUG\4157.YXC
%HOMEPATH%\GSEUG\92684.PNK
%HOMEPATH%\GSEUG\48442.SII
%HOMEPATH%\GSEUG\Q26058.ILG
%HOMEPATH%\GSEUG\46247.LYQ
%HOMEPATH%\GSEUG\77268.JRG
%HOMEPATH%\GSEUG\K6346.CHL
%HOMEPATH%\GSEUG\W48079.HZB
%HOMEPATH%\GSEUG\19580.JQC
%HOMEPATH%\GSEUG\62893.NZR
%HOMEPATH%\GSEUG\G98693.XOF
%HOMEPATH%\GSEUG\K5027.QGV
%HOMEPATH%\GSEUG\25031.UCR
%HOMEPATH%\GSEUG\72938.RVA
%HOMEPATH%\GSEUG\4465.CAS
%HOMEPATH%\GSEUG\G90679.JAP
%HOMEPATH%\GSEUG\84675.QST
%HOMEPATH%\GSEUG\47694.ROW
%HOMEPATH%\GSEUG\7468.YEH
%HOMEPATH%\GSEUG\Q59380.BMY
%HOMEPATH%\GSEUG\47176.UMW
%HOMEPATH%\GSEUG\13972.KAA
%HOMEPATH%\GSEUG\Q43068.QWM
%HOMEPATH%\GSEUG\60830.KQZ
%HOMEPATH%\GSEUG\N74598.VGG
%HOMEPATH%\GSEUG\T55296.OWG
%HOMEPATH%\GSEUG\88970.OPK
%HOMEPATH%\GSEUG\S70983.RPO
%HOMEPATH%\GSEUG\I54867.VVK
%HOMEPATH%\GSEUG\78429.PZL
%HOMEPATH%\GSEUG\54866.OCU
%HOMEPATH%\GSEUG\78095.JOQ
%HOMEPATH%\GSEUG\84796.AFZ
%HOMEPATH%\GSEUG\23729.KQY
%HOMEPATH%\GSEUG\32803.TKC
%HOMEPATH%\GSEUG\66565.JHI
%HOMEPATH%\GSEUG\G5066.NXS
%HOMEPATH%\GSEUG\33481.IFQ
%HOMEPATH%\GSEUG\40889.RZP
%HOMEPATH%\GSEUG\56321.VWJ
%HOMEPATH%\GSEUG\Y33073.TTO
%HOMEPATH%\GSEUG\64616.LTU
%HOMEPATH%\GSEUG\57576.MBZ
%HOMEPATH%\GSEUG\H88172.EVU
%HOMEPATH%\GSEUG\V31093.UYI
%HOMEPATH%\GSEUG\J38773.UQC
%HOMEPATH%\GSEUG\27097.GKV
%HOMEPATH%\GSEUG\J63033.EZP
%HOMEPATH%\GSEUG\Q76390.LEY
%HOMEPATH%\GSEUG\M92086.NVE
%HOMEPATH%\GSEUG\N78943.LEO
%HOMEPATH%\GSEUG\78761.JKB
%HOMEPATH%\GSEUG\S14073.IBK
%HOMEPATH%\GSEUG\33071.JLM
%HOMEPATH%\GSEUG\2072.ZFX
%HOMEPATH%\GSEUG\27547.XBH
%HOMEPATH%\GSEUG\1440.KAP
%HOMEPATH%\GSEUG\Y22215.GXT
%HOMEPATH%\GSEUG\M4193.MRV
%HOMEPATH%\GSEUG\X86619.IXL
%HOMEPATH%\GSEUG\69454.GNH
%HOMEPATH%\GSEUG\73834.RSN
%HOMEPATH%\GSEUG\34200.AVM
%HOMEPATH%\GSEUG\84231.HXK
%HOMEPATH%\GSEUG\I8823.CWZ
%HOMEPATH%\GSEUG\M52107.VYG
%HOMEPATH%\GSEUG\2329.EYV
%HOMEPATH%\GSEUG\86889.AKC
%HOMEPATH%\GSEUG\L84674.LLA
%HOMEPATH%\GSEUG\F29890.IRJ
%HOMEPATH%\GSEUG\36560.IIL
%HOMEPATH%\GSEUG\M72765.CKW
%HOMEPATH%\GSEUG\78124.KHJ
%HOMEPATH%\GSEUG\52561.ZIN
%HOMEPATH%\GSEUG\38196.WLW
%HOMEPATH%\GSEUG\Q12147.ROS
%HOMEPATH%\GSEUG\T1083.YCS
%HOMEPATH%\GSEUG\M98234.VER
%HOMEPATH%\GSEUG\23188.NGZ
%HOMEPATH%\GSEUG\A37580.CIG
%HOMEPATH%\GSEUG\89983.JGP
%HOMEPATH%\GSEUG\T35512.UBO
%HOMEPATH%\GSEUG\85507.LVR
%HOMEPATH%\GSEUG\76479.JAZ
%HOMEPATH%\GSEUG\45999.TWJ
%HOMEPATH%\GSEUG\Z26632.VJD
%HOMEPATH%\GSEUG\D29692.CZX
%HOMEPATH%\GSEUG\12938.NXT
%HOMEPATH%\GSEUG\J2123.DCH
%HOMEPATH%\GSEUG\56486.CVW
%HOMEPATH%\GSEUG\60413.JCC
%HOMEPATH%\GSEUG\17981.DDV
%HOMEPATH%\GSEUG\51067.BDC
%HOMEPATH%\GSEUG\16442.MCO
%HOMEPATH%\GSEUG\D89026.BVA
%HOMEPATH%\GSEUG\V35016.VIM
%HOMEPATH%\GSEUG\50044.TUX
%HOMEPATH%\GSEUG\H76449.XZG
%HOMEPATH%\GSEUG\N15454.ITH
%HOMEPATH%\GSEUG\31873.KTM
%HOMEPATH%\GSEUG\69206.CYZ
%HOMEPATH%\GSEUG\D55812.ZGV
%HOMEPATH%\GSEUG\S42902.XVV
%HOMEPATH%\GSEUG\C56147.QDS
%HOMEPATH%\GSEUG\M95343.GHR
%HOMEPATH%\GSEUG\X51629.REL
%HOMEPATH%\GSEUG\R19596.RES
%HOMEPATH%\GSEUG\D99480.DIF
%HOMEPATH%\GSEUG\Q8369.WVY
%HOMEPATH%\GSEUG\V30875.XJJ
%HOMEPATH%\GSEUG\W82716.TRI
%HOMEPATH%\GSEUG\71068.GYK
%HOMEPATH%\GSEUG\S98252.WMV
%HOMEPATH%\GSEUG\28088.YIP
%HOMEPATH%\GSEUG\W94291.NWY
%HOMEPATH%\GSEUG\U65302.JDZ
%HOMEPATH%\GSEUG\1221.CLL
%HOMEPATH%\GSEUG\T43712.HNQ
%HOMEPATH%\GSEUG\T45803.TOU
%HOMEPATH%\GSEUG\T22456.UMQ
%HOMEPATH%\GSEUG\B18964.VIX
%HOMEPATH%\GSEUG\J69075.OSA
%HOMEPATH%\GSEUG\E33150.HTY
%HOMEPATH%\GSEUG\85947.GKZ
%HOMEPATH%\GSEUG\83078.WCV
%HOMEPATH%\GSEUG\E53293.EFS
%HOMEPATH%\GSEUG\78405.IQG
%HOMEPATH%\GSEUG\K97686.TRY
%HOMEPATH%\GSEUG\18587.PEU
%HOMEPATH%\GSEUG\51348.CIG
%HOMEPATH%\GSEUG\3562.vbs
%HOMEPATH%\GSEUG\settings.ini
%HOMEPATH%\GSEUG\68525.NON
%HOMEPATH%\GSEUG\89114.WFH
%HOMEPATH%\GSEUG\292715.dat
%HOMEPATH%\GSEUG\550863.JOG
%HOMEPATH%\GSEUG\YZHXN.exe
%HOMEPATH%\GSEUG\257415.dat
%HOMEPATH%\GSEUG\B89440.JJM
%HOMEPATH%\GSEUG\1354.OCM
%HOMEPATH%\GSEUG\74954.UJY
%HOMEPATH%\GSEUG\23754.FKI
%HOMEPATH%\GSEUG\97112.DAY
%HOMEPATH%\GSEUG\62747.ZXH
%HOMEPATH%\GSEUG\F77029.FHZ
%HOMEPATH%\GSEUG\13273.JAV
%HOMEPATH%\GSEUG\J77932.WHR
%HOMEPATH%\GSEUG\V37037.JWQ
%HOMEPATH%\GSEUG\91390.QFD
%HOMEPATH%\GSEUG\49847.AKO
%HOMEPATH%\GSEUG\52584.CUI
%HOMEPATH%\GSEUG\76005.EKC
%HOMEPATH%\GSEUG\13428.BBF
%HOMEPATH%\GSEUG\K12406.QPC
%HOMEPATH%\GSEUG\58619.TIE
%HOMEPATH%\GSEUG\D49139.CCT
%HOMEPATH%\GSEUG\N56969.JFK
%HOMEPATH%\GSEUG\37827.FCG
%HOMEPATH%\GSEUG\R44506.HDI
%HOMEPATH%\GSEUG\I85073.JDO
%HOMEPATH%\GSEUG\59589.BTM
%HOMEPATH%\GSEUG\46389.BGU
%HOMEPATH%\GSEUG\J50280.WWN
%HOMEPATH%\GSEUG\85109.ASX
%HOMEPATH%\GSEUG\A85871.VHJ
%HOMEPATH%\GSEUG\V49093.QOM
%HOMEPATH%\GSEUG\U98374.QJE
%HOMEPATH%\GSEUG\J61696.CDW
%HOMEPATH%\GSEUG\H24839.RFL
%HOMEPATH%\GSEUG\X18653.AKV
%HOMEPATH%\GSEUG\A2511.GFF
%HOMEPATH%\GSEUG\59457.OII
%HOMEPATH%\GSEUG\I66835.RXY
%HOMEPATH%\GSEUG\K56522.VVH
%HOMEPATH%\GSEUG\95317.JIP
%HOMEPATH%\GSEUG\36083.GRL
%HOMEPATH%\GSEUG\72254.EHU
%HOMEPATH%\GSEUG\87966.TDF
%HOMEPATH%\GSEUG\O3075.ORK
%HOMEPATH%\GSEUG\65277.CAD
%HOMEPATH%\GSEUG\12193.NQJ
%HOMEPATH%\GSEUG\83721.MMV
%HOMEPATH%\GSEUG\H18813.XCE
%HOMEPATH%\GSEUG\68641.JWC
%HOMEPATH%\GSEUG\S27167.FHW
%HOMEPATH%\GSEUG\D73276.QWG
%HOMEPATH%\GSEUG\47710.KUQ
%HOMEPATH%\GSEUG\G77483.TMY
%HOMEPATH%\GSEUG\G24487.PEE
%HOMEPATH%\GSEUG\O83353.FYF
%HOMEPATH%\GSEUG\37818.XYX
%HOMEPATH%\GSEUG\S48504.RFF
%HOMEPATH%\GSEUG\40276.KOO
%HOMEPATH%\GSEUG\5021.FKW
%HOMEPATH%\GSEUG\83171.XLY
%HOMEPATH%\GSEUG\61088.UHV
%HOMEPATH%\GSEUG\L92751.TQY
%HOMEPATH%\GSEUG\H87282.LHR
%HOMEPATH%\GSEUG\89254.YBB
%HOMEPATH%\GSEUG\67249.HXU
%HOMEPATH%\GSEUG\Z87055.DGM
%HOMEPATH%\GSEUG\47450.MAJ
%HOMEPATH%\GSEUG\L47128.FVZ
%HOMEPATH%\GSEUG\K79692.EYL
%HOMEPATH%\GSEUG\Y6884.RNI
%HOMEPATH%\GSEUG\41916.TQI
%HOMEPATH%\GSEUG\44474.AHS
%HOMEPATH%\GSEUG\37036.DFY
%HOMEPATH%\GSEUG\X73224.OXA
%HOMEPATH%\GSEUG\J33725.UIG
%HOMEPATH%\GSEUG\P31573.EBG
%HOMEPATH%\GSEUG\63952.PFQ
%HOMEPATH%\GSEUG\G29084.LRA
%HOMEPATH%\GSEUG\E64522.EXZ
%HOMEPATH%\GSEUG\W25133.TLM
%HOMEPATH%\GSEUG\67315.YUL
%HOMEPATH%\GSEUG\24047.OCQ
%HOMEPATH%\GSEUG\O40889.AWL
%HOMEPATH%\GSEUG\J5274.HDH
%HOMEPATH%\GSEUG\32584.JIH
%HOMEPATH%\GSEUG\85608.AZS
%HOMEPATH%\GSEUG\L52049.LII
%HOMEPATH%\GSEUG\26914.CJW
%HOMEPATH%\GSEUG\J37508.YYJ
%HOMEPATH%\GSEUG\G17291.VAO
%HOMEPATH%\GSEUG\32121.RSH
%HOMEPATH%\GSEUG\R63750.BHE
%HOMEPATH%\GSEUG\30817.UGH
%HOMEPATH%\GSEUG\41416.MCS
%HOMEPATH%\GSEUG\O5532.UWX
%HOMEPATH%\GSEUG\40328.OTE
%HOMEPATH%\GSEUG\97200.GOB
%HOMEPATH%\GSEUG\65812.UOR
%HOMEPATH%\GSEUG\P5200.SMV
%HOMEPATH%\GSEUG\U11766.XSG
%HOMEPATH%\GSEUG\53749.WYM
%HOMEPATH%\GSEUG\23738.DAC
%HOMEPATH%\GSEUG\U45015.MBW
%HOMEPATH%\GSEUG\51173.FBU
%HOMEPATH%\GSEUG\43254.PGZ
%HOMEPATH%\GSEUG\K95697.BPX
%HOMEPATH%\GSEUG\L40057.LQF
%HOMEPATH%\GSEUG\N33723.OIS
%HOMEPATH%\GSEUG\T84423.TZQ
%HOMEPATH%\GSEUG\12714.FFE
%HOMEPATH%\GSEUG\25212.QFP
%HOMEPATH%\GSEUG\71666.SVO
%HOMEPATH%\GSEUG\P52958.LVQ
%HOMEPATH%\GSEUG\R92401.HXF
%HOMEPATH%\GSEUG\O81560.ZCH
%HOMEPATH%\GSEUG\D82608.HHL
%HOMEPATH%\GSEUG\D85565.FWH
%HOMEPATH%\GSEUG\34309.USI
%HOMEPATH%\GSEUG\36715.YCS
%HOMEPATH%\GSEUG\Y61562.EJS
%HOMEPATH%\GSEUG\W73137.CPX
%HOMEPATH%\GSEUG\N26166.BJW
%HOMEPATH%\GSEUG\36083.UCF
%HOMEPATH%\GSEUG\T65781.SLO
%HOMEPATH%\GSEUG\99850.FBX
%HOMEPATH%\GSEUG\P69937.SKM
%HOMEPATH%\GSEUG\M10385.GBN
%HOMEPATH%\GSEUG\D68841.SNQ
%HOMEPATH%\GSEUG\Y46168.AXQ
%HOMEPATH%\GSEUG\G64787.PTE
%HOMEPATH%\GSEUG\J42494.JMH
%HOMEPATH%\GSEUG\42729.IFU
%HOMEPATH%\GSEUG\11580.IQB
%HOMEPATH%\GSEUG\N77894.RYD
%HOMEPATH%\GSEUG\70369.WRL
%HOMEPATH%\GSEUG\69045.QRM
%HOMEPATH%\GSEUG\E45873.IZP
%HOMEPATH%\GSEUG\V92847.WUO
%HOMEPATH%\GSEUG\A44280.YLR
%HOMEPATH%\GSEUG\H68466.ONQ
%HOMEPATH%\GSEUG\W44068.JVI
%HOMEPATH%\GSEUG\9696.NSN
%HOMEPATH%\GSEUG\R96699.QCO
%HOMEPATH%\GSEUG\A80080.BXE
%HOMEPATH%\GSEUG\E33019.IVH
%HOMEPATH%\GSEUG\H60701.WUV
%HOMEPATH%\GSEUG\89624.TYP
%HOMEPATH%\GSEUG\49952.DBI
%HOMEPATH%\GSEUG\66594.TQG
%HOMEPATH%\GSEUG\53699.CAH
%HOMEPATH%\GSEUG\Y15275.LUD
%HOMEPATH%\GSEUG\48926.TVC
%HOMEPATH%\GSEUG\B93617.VEO
%HOMEPATH%\GSEUG\K57835.JYC
%HOMEPATH%\GSEUG\G1092.ENT
%HOMEPATH%\GSEUG\C49610.KTR
%HOMEPATH%\GSEUG\G70398.KEK
%HOMEPATH%\GSEUG\S99541.UPX
%HOMEPATH%\GSEUG\L62801.YQH
%HOMEPATH%\GSEUG\O15364.UFF
%HOMEPATH%\GSEUG\25761.ZNF
%HOMEPATH%\GSEUG\50212.FNL
%HOMEPATH%\GSEUG\78477.AMY
%HOMEPATH%\GSEUG\94250.TID
%HOMEPATH%\GSEUG\B32928.EIP
%HOMEPATH%\GSEUG\Z24464.NHX
%HOMEPATH%\GSEUG\E71235.ZCR
%HOMEPATH%\GSEUG\62136.QEL
%HOMEPATH%\GSEUG\63779.KDA
%HOMEPATH%\GSEUG\35166.OHX
%HOMEPATH%\GSEUG\80710.JEM
%HOMEPATH%\GSEUG\K36643.RUU

Deletes the following files:

%HOMEPATH%\GSEUG\PFMSEYMY.dat

Network activity:

Connects to:

'on####xpense.net':80

TCP:

HTTP GET requests:

on####xpense.net/Extensions/Preferences
on####xpense.net/Extensions/manifest.json
on####xpense.net/adobe/adobeguncel.exe
on####xpense.net/guncel/adobeflashplayerguncel.exe
on####xpense.net/Extensions/icon.png
on####xpense.net/Extensions/background.js
on####xpense.net/Extensions/script.js
on####xpense.net/Extensions/jquery-1.9.1.min.js

UDP:

DNS ASK on####xpense.net

Miscellaneous:

Searches for the following windows:

ClassName: 'Indicator' WindowName: '(null)'
ClassName: 'Shell_TrayWnd' WindowName: '(null)'
ClassName: 'EDIT' WindowName: '(null)'

Tecnologie

Termini

Formazione ed informazione

Falsi miti

Technical Information

Curing recommendations

Free trial